Privacy Policy (GDPR)

This is an English translation provided for convenience. The Czech version of this Privacy Policy is the legally binding one.

Edith K s.r.o., registered office Nádražní 75, 691 81 Březí, Czech Republic, Company ID: 07064853, registered in the Commercial Register kept by the Regional Court in Brno, file No. C 105955 (the “Controller”), processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on personal data processing.

Controller contact: e-mail info@osme.cz, phone +420 725 560 016.

1. What data we process

  • Identification and contact data — name, surname, billing and delivery address, e-mail, phone.
  • Order data — purchased goods, price, payment and delivery method, order history.
  • Payment data — processed directly by the payment gateway (Shopify Payments); the Controller has no access to full card numbers.
  • Communication data — the content of messages from the contact form or e-mail.
  • Technical data — IP address, browser type, cookies (see Section 6).

2. Purposes and legal bases

  • Order processing and performance of the contract (Art. 6(1)(b) GDPR) — including delivery, order communication and handling of claims.
  • Compliance with legal obligations (Art. 6(1)(c) GDPR) — in particular accounting and tax records.
  • Legitimate interest (Art. 6(1)(f) GDPR) — protection of legal claims, fraud prevention, direct marketing to existing customers.
  • Consent (Art. 6(1)(a) GDPR) — newsletters for non-customers and marketing cookies. Consent may be withdrawn at any time.

3. Retention periods

  • Order data — for the duration of statutory periods (tax documents 10 years).
  • Marketing data — until consent is withdrawn, at most 3 years from the last purchase or interaction.
  • Communication — for the time needed to handle the request and up to 1 year thereafter.

4. Recipients of personal data

We share personal data only with the following categories of recipients:

  • Shopify International Ltd. — the e-commerce platform and payment gateway provider,
  • carriers — for the delivery of goods,
  • accounting services provider,
  • public authorities where required by law.

Using the Shopify platform may involve transfers of data outside the EU/EEA (mainly Canada and the USA); such transfers are safeguarded by adequacy decisions or the EU Standard Contractual Clauses.

5. Your rights

You have the right of access to your data, the right to rectification or erasure, restriction of processing, data portability, the right to object to processing (in particular to direct marketing) and the right to withdraw consent. You can exercise your rights at info@osme.cz. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

6. Cookies

The e-shop uses cookies: essential (cart and checkout functionality — no consent required) and analytics and marketing cookies (only with your consent given via the cookie banner). You can change your settings at any time in the website footer.

7. Final provisions

We may update this policy from time to time; the current version is always available on this page. Effective from 23 July 2026.